Submeter #547881: vendor https://www.lingxing.com/ v2 Remote Code Executioninformação

Títulovendor https://www.lingxing.com/ v2 Remote Code Execution
DescriçãoAn unauthenticated file upload vulnerability has been identified in the .NET system. This vulnerability allows an attacker to upload arbitrary files, including potentially malicious ASPX files, which can lead to remote code execution and full server compromise.
Fonte⚠️ https://github.com/666lail/report/blob/main/tmp/fileUpload_3.md
Utilizador
 207556249 (UID 81808)
Submissão01/04/2025 16h04 (há 2 anos)
Moderação14/04/2025 00h14 (12 days later)
EstadoAceite
Entrada VulDB304593 [Lingxing ERP 2 UploadAjax.ashx file Elevação de Privilégios]
Pontos17

Do you want to use VulDB in your project?

Use the official API to access entries easily!